8686b72b761db433e1e76151f26554b27c76971e2fdcaf4541b5c55aa541e09f | Triage

Sharing

General

Target

8686b72b761db433e1e76151f26554b27c76971e2fdcaf4541b5c55aa541e09f
Size

209KB
Sample

221205-2kkybage7y
MD5

c44e5fe1f523244f500276cc45e7369f
SHA1

0cb1410d070a43717dd0f56a666516063c101bcf
SHA256

8686b72b761db433e1e76151f26554b27c76971e2fdcaf4541b5c55aa541e09f
SHA512

c4d09c668c9f6aa31a9d0951de795549e264bbcb028838a3814070708cb8ee8b0bbd6391108a3d4ccfbf815adab94a4e617f57dee40c3bcc5bf2a9d263edb531
SSDEEP

3072:bAsBzxBTQGjKYhIrZUWBkMP02SVYH3oVtBGJX6nhauLX7KG:bAsB9BkBY+rZ3Q230i9uLX73

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  8686b72b761db433e1e76151f26554b27c76971e2fdcaf4541b5c55aa541e09f
- Size
  
  209KB
- MD5
  
  c44e5fe1f523244f500276cc45e7369f
- SHA1
  
  0cb1410d070a43717dd0f56a666516063c101bcf
- SHA256
  
  8686b72b761db433e1e76151f26554b27c76971e2fdcaf4541b5c55aa541e09f
- SHA512
  
  c4d09c668c9f6aa31a9d0951de795549e264bbcb028838a3814070708cb8ee8b0bbd6391108a3d4ccfbf815adab94a4e617f57dee40c3bcc5bf2a9d263edb531
- SSDEEP
  
  3072:bAsBzxBTQGjKYhIrZUWBkMP02SVYH3oVtBGJX6nhauLX7KG:bAsB9BkBY+rZ3Q230i9uLX73
Score

8^/10

persistence
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2